All products

github.com/elastic/beats/v7

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Metricbeat affected by multiple denial of service vulnerabilitiesCVE-2026-0528 · GHSA-W2GR-585J-R428Version ranges need review. github.com/elastic/beats/v7github.com/elastic/beats Go Medium Fix reported
Elasticsearch Packetbeat has Excessive Allocation of Memory and CPU via Malicious IPv4 FragmentsCVE-2025-68388 · GHSA-FJ69-23M4-CCVVVersion ranges need review. github.com/elastic/beats/v7github.com/elastic/beats Go High Fix reported
Metricbeat Allocates Memory with Excessive Size Value Leading to Denial of ServiceCVE-2026-26931 · GHSA-5VRW-QJXW-89R5Version ranges need review. github.com/elastic/beats/v7github.com/elastic/beats Go Medium Fix reported
Packetbeat does not properly validate an array index in multiple protocol parser componentsCVE-2026-26933 · GHSA-27QJ-9GVP-8RH9Version ranges need review. github.com/elastic/beats/v7github.com/elastic/beats Go Medium Fix reported
Filebeat Beats has Buffer Overflow via Malformed Syslog Message or Malicious Tokenizer Pattern in Dissect ConfigurationCVE-2025-68383 · GHSA-2MJ3-6GRC-PX38Version ranges need review. github.com/elastic/beats/v7github.com/elastic/beats Go Medium Fix reported
Elastic Beats inserts sensitive information into log fileCVE-2023-49922 · GHSA-HJ4R-2C9C-29H3Version ranges need review. github.com/elastic/beats/v7github.com/elastic/beats Go Medium Fix reported